News
Vulnerability-Lookup 5.5.0 released
We are pleased to announce the release of Vulnerability-Lookup 5.5.0! This is a big one. The legacy admin flags give way to full Role-Based Access Control: roles, permissions, global and per-resource assignments, creation policies and dedicated management UIs, enforced across the views and the APIs. The vulnerability page gains AI-suggested MITRE ATT&CK techniques, inferred from the vulnerability description by a model trained with VulnTrain. On top of that: an EUVD ID allocation and creation pipeline, feeder supervision with automatic respawning and CSAF backoff, new VEX enrichment sources (SUSE and Microsoft MSRC) with a VEX records browse view, new feeders for Rocky Linux, Ubuntu and TuxCare, and a redesigned admin interface.
July 24, 2026
Vulnerability-Lookup 5.4.0 released
We are pleased to announce the release of Vulnerability-Lookup 5.4.0! The highlight of this release is VEX enrichment: a new feeder ingests Red Hat’s per-CVE CSAF VEX documents and attaches them to the corresponding vulnerabilities, surfaced through new /api/vex endpoints, a VEX tab on the vulnerability page and a VEX badge in the vulnerability header. Administrators gain per-user control over CNA publication with a dedicated credentials overview, the admin dashboard was modernized, and a batch of feeder robustness fixes makes the CSAF and VARIoT feeders much better behaved on partial failures.
July 10, 2026
Vulnerability-Lookup 5.3.0 released
We are pleased to announce the release of Vulnerability-Lookup 5.3.0! This release brings email subscriptions to KEV catalogs, letting you receive batched digests whenever new exploited vulnerabilities are added to a catalog you follow. Search gained the long-requested ability to filter and sort by CVSS base score, two new feeder families join the platform — the AVID (AI Vulnerability Database) feeder and a set of new CSAF vendor feeders — and the KEV catalogs page gained a whole suite of coverage visualisations. On the account side, 2FA recovery codes make account recovery safer.
July 7, 2026
Vulnerability Report - June 2026
All vulnerability reports Introduction This vulnerability report has been generated with the help of AI, using the VulnMCP tooling on top of Vulnerability-Lookup, with contributions from the platform’s community.
July 2, 2026
Vulnerability-Lookup 5.2.0 released
We are pleased to announce the release of Vulnerability-Lookup 5.2.0! This release centers on a broad interface redesign — a refreshed home page built around a hero search and a tabbed dashboard, with the shared card design language now rolled out across the rest of the application. Alongside it come new change-aware browse API endpoints that let clients poll only what actually changed, a modernized KEV catalogs experience with aggregated feeds, and a confidential notes field for vulnerability disclosures.
June 19, 2026
KEV Catalog Coverage in Vulnerability-Lookup
Vulnerability-Lookup can explore several Known Exploited Vulnerabilities (KEV) catalogs side by side — the local catalog of your instance as well as external ones such as CISA KEV, EUVD KEV and CIRCL KEV, all conforming to the GCVE BCP-07 standard. Until now you could browse each catalog on its own, but there was no easy way to compare them. The KEV catalogs page now features a Catalog Coverage matrix that does exactly that.
June 16, 2026
Vulnerability-Lookup 5.1.0 released
We are pleased to announce the release of Vulnerability-Lookup 5.1.0! The highlight of this release is the new CNA Publication Service, which lets vulnerabilities from your local source be published to the official CVE API as part of the Coordinated Vulnerability Disclosure (CVD) process. It also brings a new exploited-CVE ratio statistic, CSAF advisories in full-text search, further UI harmonization, and important reindexing and feeder fixes. A special thank you to Niclas Dauster for the substantial contribution behind the CNA Publication Service (#416).
June 11, 2026
Vulnerability Report - May 2026
All vulnerability reports Introduction This vulnerability report has been generated with the help of AI, using the VulnMCP tooling on top of Vulnerability-Lookup, with contributions from the platform’s community.
June 3, 2026
Vulnerability-Lookup 5.0.0 released
We are thrilled to announce the release of Vulnerability-Lookup 5.0.0! This major release centers on a new CNA-interoperable API for managing the vulnerabilities of your local source, together with deep Vulnogram integration, a continued UI refresh, and a long list of stability and correctness fixes. A special thank you to Niclas Dauster for the substantial contribution behind the new CNA-interoperable API (#398). What’s New CNA- and GNA-Compatible Vulnerability Management Vulnerabilities in your local instance can now be managed in a CNA-interoperable way through a dedicated API.
May 29, 2026
Vulnerability-Lookup 4.6.0 released
We are excited to announce the release of Vulnerability-Lookup 4.6.0! This version brings more transparency, new data sources, API improvements, notable UI enhancements, and several performance and stability fixes. What’s New VLAI model transparency The VLAI badge popover now surfaces the exact model name and revision used for a given analysis, with direct links to the HuggingFace model card and the revision commit. This is particularly useful as we regularly update our AI models and publish new versions on HuggingFace, making it easy to track exactly which model version produced a given result.
May 21, 2026